CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

14216 matches found

NVD•added 2025/12/09 4:17 p.m.•12 views

CVE-2024-56835

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.0, RUGGEDCOM ROX MX5000RE All versions V2.17.0, RUGGEDCOM ROX RX1400 All versions V2.17.0, RUGGEDCOM ROX RX1500 All versions V2.17.0, RUGGEDCOM ROX RX1501 All versions V2.17.0, RUGGEDCOM ROX RX1510 All versions V2.17.0...

8.8CVSS0.00515EPSS

SaveExploits0References1

OSV•added 2025/12/09 4:17 p.m.•12 views

CVE-2024-56837

8.6CVSS5.7AI score0.00524EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•38 views

CVE-2024-56840

7.5CVSS0.00646EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•3 views

CVE-2024-56839

8.6CVSS9.3AI score0.00646EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•25 views

CVE-2024-56839

8.6CVSS0.00646EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•26 views

CVE-2024-56839

CVE-2024-56839 affects Siemens RUGGEDCOM ROX II family (ROX II, MX5000/MX5000RE, RX1400/1500/1501/1510/1511/1512/1524/1536 and ROX 5000) with code injection possible when VRF is used. The root cause is injection in VRF-enabled configurations, enabling arbitrary code execution as root. Impact is h...

8.6CVSS9.3AI score0.00646EPSS

SaveExploits0References1Affected Software1

CVE•added 2025/12/09 10:44 a.m.•21 views

CVE-2024-56837

Siemens RUGGEDCOM ROX II family devices (ROX II) prior to v2.17.0 are affected by a code-injection vulnerability caused by insufficient validation during installation and loading of certain configuration files. Several sources document that an attacker could exploit this to spawn a reverse shell ...

8.6CVSS8.9AI score0.00524EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2025/12/09 10:44 a.m.•5 views

CVE-2024-56837

8.6CVSS8.9AI score0.00524EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•32 views

CVE-2024-56837

8.6CVSS0.00524EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•35 views

CVE-2024-56836

7.7CVSS0.0044EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•5 views

CVE-2024-56836

7.7CVSS8.9AI score0.0044EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•25 views

CVE-2024-56836

The CVE-2024-56836 issue affects Siemens RUGGEDCOM ROX II devices (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with versions before 2.17.0. According to connected documents, the vulnerability arises during Dynamic DNS configuration where additional con...

8.8CVSS8.9AI score0.0044EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2025/12/09 10:44 a.m.•4 views

CVE-2024-56835

8.8CVSS9AI score0.00515EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•26 views

CVE-2024-56835

8.8CVSS0.00515EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•24 views

CVE-2024-56835

CVE-2024-56835 affects Siemens RUGGEDCOM ROX II family (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) prior to v2.17.0. The DHCP Server configuration file is subject to code injection, enabling an attacker to spawn a reverse shell and gain root access. C...

8.8CVSS9AI score0.00515EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2025/12/09 8:29 a.m.•5 views

CVE-2025-66271

Clone for Windows provided by ELECOM CO.,LTD. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

8.4CVSS7.4AI score0.00151EPSS

SaveExploits0References2

Cvelist•added 2025/12/09 8:12 a.m.•49 views

CVE-2025-41697 Shell access to UART Console

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692...

6.8CVSS0.0023EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 8:12 a.m.•4 views

CVE-2025-41697 Shell access to UART Console

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692...

6.8CVSS6.6AI score0.0023EPSS

SaveExploits0References1

CVE•added 2025/12/09 8:12 a.m.•35 views

CVE-2025-41697

The CVE-2025-41697 entry describes a vulnerability where an attacker can use an undocumented UART port on the PCB as a side-channel to gain root access, leveraging credentials obtained from CVE-2025-41692. The combined chain relies on a hardware-side channel and weak OS credential handling, enabl...

6.8CVSS6.2AI score0.0023EPSS

SaveExploits0References1Affected Software1

RedhatCVE•added 2025/12/09 12:11 a.m.•9 views

CVE-2025-65363

Authenticated append-style command-injection Ruijie APs APRGOS 11.1.x allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the webaction.do endpoint...

7.2CVSS7.2AI score0.06686EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by